Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          MksnNf3QQpXHdpNYa+DQhh3KMscBYa7IK5xkLme4rps=
Subject key identifier:   AC:A8:95:19:77:85:52:74:57:93:23:89:0B:20:26:9E:3F:44:0A:18
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019A4D73F3D16858809CE4F40F6629154CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          1709
Signing time:             Tue 04 Nov 2025 06:00:35 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:35 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:35 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: ZtyuVGuAuVcTdx9mUbB2HCbTclaSj889k7mY2QzchKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:f3:d1:68:58:80:9c:e4:f4:0f:66:29:15:4c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Nov  4 06:00:35 2025 GMT
            Not After : Nov  5 06:00:35 2025 GMT
        Subject: CN=aca8951977855274579323890b20269e3f440a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:67:97:d6:8a:c1:d0:a4:cf:3d:1a:1a:ce:
                    27:d9:fc:34:e0:8b:57:48:e3:1a:f7:d4:8c:3a:3d:
                    a1:55:d0:ea:f4:ee:20:3e:b7:0d:79:1e:cd:57:66:
                    38:a3:d9:74:ff:b8:9a:fc:93:a8:cc:8b:6f:1e:32:
                    15:6f:48:6d:25:bf:da:dc:4c:ae:6b:53:a3:bc:1f:
                    30:00:87:54:d3:38:ac:32:d0:b8:c6:06:c7:63:3a:
                    9a:9e:2d:01:5c:ec:7b:67:7d:ab:37:2e:44:c1:29:
                    63:16:f7:1a:00:c0:67:65:be:8d:3f:db:5f:96:b7:
                    c5:63:f9:9b:b7:2c:da:89:84:52:26:6d:2a:24:b5:
                    f8:ef:c9:a6:c4:b2:39:ed:b6:22:6a:ab:a8:e7:ab:
                    e7:72:67:60:96:b7:23:cf:2f:6a:d5:88:5d:01:a0:
                    3a:83:67:ae:fa:41:0a:51:b6:fb:49:b4:c1:a4:9d:
                    86:2c:6c:01:46:bd:b7:fc:8f:7c:7c:58:ae:ca:63:
                    fe:c8:f7:5a:b7:a6:59:d8:a4:00:81:8f:d3:5d:b4:
                    f1:cb:70:4d:33:05:d1:03:43:12:14:10:d8:35:54:
                    c4:4d:d1:57:11:6c:3c:22:cd:04:5b:76:20:58:ab:
                    8a:ef:a3:30:9a:5b:45:3a:bf:63:0e:31:7c:e8:e4:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A8:95:19:77:85:52:74:57:93:23:89:0B:20:26:9E:3F:44:0A:18
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b1:82:4a:80:df:3b:d1:22:59:8e:3b:07:35:17:1b:79:04:
         21:78:89:29:be:a5:c9:9e:ee:88:5c:66:d4:12:8d:25:9d:ba:
         90:2c:1f:00:3b:24:cc:c9:be:bb:03:f9:65:e6:12:9e:c2:10:
         d7:24:28:52:27:0e:97:43:1c:34:c0:bc:9b:e5:71:b8:34:d8:
         60:cf:cd:4c:a5:a8:5f:8e:14:66:ca:64:9f:ac:67:d7:f4:4a:
         df:4f:12:15:75:78:a2:66:84:74:aa:7d:2e:68:7d:5b:b0:4c:
         58:d7:09:3a:d1:da:a5:81:06:7d:7e:95:c3:b9:00:40:85:5b:
         11:e5:81:fd:56:64:ad:d8:af:b0:21:7f:af:ae:de:23:2a:8a:
         3d:f3:bf:53:2b:a3:a5:08:40:a2:24:7f:db:aa:93:1f:52:be:
         66:81:49:c1:6a:0f:6b:3d:0f:54:7b:b6:c8:8e:f8:3c:45:23:
         5d:8f:64:01:f2:3f:aa:0d:1b:37:51:65:1f:56:e6:e3:95:4f:
         b1:b3:75:f7:ca:b5:8d:58:e4:08:e1:41:74:b0:c0:08:f3:59:
         61:36:f0:74:21:62:c7:cc:7d:c1:c6:a2:6c:a9:e5:2c:01:92:
         aa:9c:c4:72:7b:35:a3:be:b2:36:8f:09:77:5a:b3:c5:18:56:
         88:da:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:11 2025 by rpki-client